Vulnerability feed

Executive summary

This advisory covers a fix in the Linux kernel's Imagination GPU driver (drm/imagination) that corrects how memory for page tables is reserved when mapping GPU memory. The flaw could make the driver reserve a huge number of page tables, exhausting system memory and triggering an out-of-memory panic. The advisory describes the fix as a kernel stable tree patch, and it does not state a severity score.

Technical summary

The flaw is an integer underflow and incorrect sizing in the page table preallocation logic of the pvr_mmu_op_context_create() function in the drm/imagination driver. When a mapping crossed a page table boundary, the difference between start and end indices could underflow, causing the driver to preallocate a very large number of MMU pages, which could exhaust memory and trigger an out-of-memory panic. The fix sizes the tables from the device address and the inclusive end of the range, and an exclusive end that allocated one table too many is also removed. The advisory does not state the attack vector, required privileges, or CVSS score. It does not state affected or fixed version numbers beyond the referenced commits, and it does not state any workaround or detection guidance.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/51b56bad96fd201…f660b337c00317c65151

Score

No CVSS score published.

Affects

LinuxLinuxLinux kernelLinux drm/imagination